Analysis

  • max time kernel
    122s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    09/07/2024, 12:33

General

  • Target

    3063ad2028ba82bb3464494077154e98_JaffaCakes118.pdf

  • Size

    12KB

  • MD5

    3063ad2028ba82bb3464494077154e98

  • SHA1

    9113478918cb2340bfcde3d3268d78921f66aae7

  • SHA256

    23b99429de7d697d19e0f625ecbb1443eae16b9c936dfbafcdbbef26aa031717

  • SHA512

    995d387025a8d8bdf458ca75e7dcd1bc92bb1c35804ccc4e720bf7a4cf051b4a7b4b1cb721fea45d9b4cf69324a719381b3e19249407a5c550f62247b9e51389

  • SSDEEP

    384:SPe4xLMULIGAXGBGB8fVRyiO92m548kHhJAqG00Szz9e7IkO:S26DHA2B08byp3dAhb90ieY

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3063ad2028ba82bb3464494077154e98_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1712

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    55a995d3a224f6232b07dbf20660538b

    SHA1

    5ffff836ca50bbf7db9c10d8ada0ae1937ea2757

    SHA256

    fedd3c1372a1650ae3181e29c01af9e8499da4b1a1d2185181e10a02e376c67e

    SHA512

    79583e81a7a0210778c2c5d6cc5b38f1ba758108706afeade7a38013cd817094fbde8bc2b429c23184fa8f893664c0b9b096596b24b44d289ac149792deee363

  • memory/1712-0-0x0000000003C30000-0x0000000003CA6000-memory.dmp

    Filesize

    472KB